Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: T59vrhpiRp+DM4fYwL8aOyde3E4NsJFl21+mSsRK1dI=
Subject key identifier: D0:BF:E4:53:17:EE:1D:D9:79:BC:72:DA:31:B1:1B:17:97:FD:E8:39
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 0198334B64D69B93B377E4DD1CC25926C95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0AAC
Signing time: Tue 22 Jul 2025 18:00:35 +0000
Manifest this update: Tue 22 Jul 2025 18:00:35 +0000
Manifest next update: Wed 23 Jul 2025 18:00:35 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: lU8C0z4ubw5kwEMjKepNViqjxV6q8S8WbjSHxV9NTg0=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:33:4b:64:d6:9b:93:b3:77:e4:dd:1c:c2:59:26:c9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jul 22 18:00:35 2025 GMT
Not After : Jul 23 18:00:35 2025 GMT
Subject: CN=d0bfe45317ee1dd979bc72da31b11b1797fde839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1f:6d:bd:c2:61:37:ca:ae:4e:25:bd:10:19:
ff:0c:b5:f5:75:b0:8e:1b:7c:9a:84:a2:ed:55:0a:
f3:4f:54:57:55:13:42:11:77:51:80:60:d2:2e:51:
77:68:c6:61:a5:a8:35:c3:e0:3f:1b:6e:92:f3:ff:
d5:09:14:f9:7d:f6:b0:d5:c5:61:3e:56:02:d2:50:
02:37:4e:d8:6b:cc:e4:a3:67:4c:55:11:3f:5b:ff:
66:c0:67:82:94:90:c2:59:84:9d:31:1e:5e:1d:a8:
f1:e2:fb:56:ca:ba:97:19:36:55:59:e8:74:f1:32:
c3:6f:2a:fd:4f:0b:7e:47:82:1a:81:b4:52:c4:40:
f8:09:3a:a4:ec:32:3f:9f:1d:c7:ee:4e:16:fd:85:
02:68:84:80:24:11:8f:5e:6e:5c:24:c2:0f:48:f0:
6b:46:52:9d:09:de:16:3e:42:c8:5a:2a:8a:ad:41:
19:6c:c7:34:bc:6f:e7:7f:31:b0:62:09:2b:e5:06:
d0:eb:d2:17:f1:bb:8e:31:d0:75:c2:c1:f5:dd:98:
51:66:30:df:ca:d0:b9:df:4e:48:df:53:90:ef:9c:
b3:88:29:7d:b7:11:17:23:43:4c:c5:82:84:d6:9c:
2c:c7:46:3d:df:13:37:18:27:c4:26:1e:cf:25:55:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:E4:53:17:EE:1D:D9:79:BC:72:DA:31:B1:1B:17:97:FD:E8:39
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7b:80:6b:ce:24:20:9a:3a:e7:41:f4:c6:c2:dd:df:4d:72:
da:bf:74:be:52:9d:3a:0c:6c:a9:b9:02:39:32:a6:0c:22:38:
3b:c6:d1:55:0c:4a:15:4f:45:24:65:1e:25:96:80:ac:be:59:
20:52:9c:6e:3f:14:9a:a5:6f:c8:65:be:c6:33:5a:4d:9f:ba:
ca:ab:92:f0:84:1d:f5:b9:98:cf:56:a7:16:26:25:ee:3d:e8:
51:2f:01:e2:ea:16:6d:1d:11:1b:5e:f3:79:e2:bc:0d:70:a2:
1b:40:31:79:1d:8d:e5:46:bb:4e:01:b3:28:0c:b4:aa:e5:37:
eb:11:d6:d1:b4:ed:17:85:70:0d:61:83:ca:43:d3:07:15:ee:
23:81:ed:84:6c:33:45:1e:a8:b6:21:0d:ec:d1:36:ec:50:8e:
21:19:70:57:b8:ea:2a:a3:21:b3:fa:83:44:31:47:1c:7a:10:
a4:fc:3e:34:aa:95:37:31:57:ae:26:a8:87:81:18:56:ce:0f:
63:d9:7b:74:69:d9:56:d2:03:d8:3a:e7:94:7f:13:16:14:01:
2d:d1:02:6a:ae:3d:3a:3e:7a:b1:c8:27:bd:b7:66:19:83:89:
ed:da:35:d9:50:2e:9f:ad:8f:3b:ab:74:cd:95:df:ca:45:67:
30:af:5d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:34:29 2025 by rpki-client